CVE-2003-0615

Fixed in a distro release EPSS 4%

Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter.

Published 2003-08-01 · CVE record · OSV

Products: cgi.pm, openpkg, debian_linux

Distro releases